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Principal p 

Set<Set<Role» roleCondition = { (A, B), (B, C), (X, Y. Z) } 

if compliesWith(roleCondition) then success else failure 

boolean compliesWith(Set<Set<Role» roleCondition) { 
foreach Set<Role> allowedRoles in roleCondition { 
if not isInAnyOf(allowedRoles) return false 

} 

return true 

} 

boolean isInAnyOf(Set<Role> allowedRoles) { 
foreach Role role in allowedRoles { 
if p in role then return true 

} 

return false 
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